CA_CERTIFICATES - UCTL Manager configuration option

Description

The CA_CERTIFICATES option specifies the location of the PEM-formatted trusted Certificate Authority (CA) X.509 certificates file.

Trust CA certificates are required if Universal Broker certificate authentication and verification is desired.

Usage

Method

Syntax

IBM i

UNIX

Windows

z/OS

Command Line, Short Form

n/a





Command Line, Long Form

-ca_certs ddname or file


(tick)

(tick)

(tick)

Environment Variable

UCTLCACERTS=file

(tick)

(tick)

(tick)


Configuration File Keyword

ca_certificates ddname or file

(tick)

(tick)

(tick)

(tick)

STRUCT Parameter

CACERTS (file [lib])

(tick)




Values

z/OS

ddname is the ddname of the X.509 certificates. The value is used only when the SSL_IMPLEMENTATION option is set to OPENSSL.

Allocated to the ddname must be either a sequential data set or a member of a PDS that has a variable record format.

UNIX and Windows

file is the path name of the X.509 certificates file. Relative paths are relative the current working directory.

IBM i

file is the qualified file name of the X.509 certificates file.

The file name also can be qualified by a library name (lib). If it is not, the library list *LIBL is searched for the first occurrence of the file name.